MAL-2025-132376 Malicious code in candra-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da477a8a52c32375ec2b58c11d47e8605ef7f5402e7fb4f445c24d2d3850a39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134026 Malicious code in hadianto-miemee92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fded4e34401024969518f160d21f70f078fd1acd95192597c892ccbbd085e50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133969 Malicious code in hadi-rujaksoto74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a8a8fbe34a94392ee44a036a430a9df461938d83d2533f6372c0b8d2189f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138098 Malicious code in written_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a4be673d55cd379152ce732ddbd24f4c1131a2872dc0ed4d904e09858d25d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab54b4f00e6a4d52dceadc7b82e2af23dec561d8d07faad90e68fcd3681ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133841 Malicious code in gita-otak-otak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d67d192cca6c98400e679f126e00bc5bd6096ac259cc1d479a9d2dee91fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-tahu31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c9772fb543ec8d97957521863832ee3609711e42657aff5b775dc97ea21670d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-tahu81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1747bd11d33cef3d55ab955cd1f08aaa134456ec2ca25d5b587e35268ac1c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-empal85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceff15ad7b728f4ebc47b1ed9ad4cc565e599802a3919630463d0434d66845d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2477c2aad954e996a3e2d15943b44cef8df82db75bbc3ac78fc713d834d5b474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-esdoger91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdb3b3471b30900753affb128a6f8a64ad37d2a8f2b26b2057d17e87ee1cf49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gulai8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927a5eac5f530a3f66412d926216caea73fbe1ba6caf83d8232f766ab53ee212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af0f9ae712a230bf3db7e478d4515573c428d157abeb8f9a51156d0b5bd0dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-tempe57-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f9d778b992a1361cfef2008de4f0c437aad705688fc74dbefabb8f9afb83a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-bakwan35-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c713c4243c252fe2161f269e74f6b96f5b8e01b06fba0c128d57f0cf511ede99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a61a727a7e462ab07730bc11b389afa50557a53a8ea0594cac01b9ee82f3c0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-keraktelor7-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a498a739e5e7b0d2f319bb94be318ef493266371ff6decd0a7e96bd928a677d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-telurtahu1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d93cae044d7f9ca048192de85fe00c911290fcaf92058c497c3347ab67c000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-ongol-ongol20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e0f394e1a7e6c29bff02df4f30274b0d55434d173e85bed0d9e303c3ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-nasisayur59-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b318148e3e0fb9c5ffffb4fdbbbbd9ef6d78ad37f408165b58c3792e2f14a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...